mantrax4

8 ms·

1.
by mantrax4 12y ago
You're underestimating the work that's been done in secure password managers in the last few years. Check the whitepaper Apple published regarding their iCloud Keychain mechanism. It generates secure passwords, locks them with a p
2.
by mantrax4 12y ago
Scenario Heartbleed 2 - People heed the advice of this author, and soon all passwords are abolished, replaced with email auth. - Of course, emails still have a password, as you can't email auth an email. - Heartbleed 2 happens, hackers
3.
by mantrax4 12y ago
The problem is that getting email or SMS and having to type that code in every time, then deleting that email/SMS, manually is less convenient that using a password manager. You can have an "authentication email manager" just
4.
by mantrax4 12y ago
> I fail to see how his process has this problem and yours magically doesn't. You're making a lot of hay out of whether his "reactive" events or your "imperative" messages are better or worse, but they'
5.
by mantrax4 12y ago
Everyone has to know about the business process logic to me is the opposite of decoupling. I'd rather limit coupling to a single actor, and let the other actors be reusable. You can't avoid someone being in charge. It's an ar
6.
by mantrax4 12y ago
You actually said it, which is funny, but the right word for this is "validating". Here's the chain: 1. Get raw input. 2. Validate it (number, not number, in range, not in range?) 3. Optionally format it to canonical format (
7.
by mantrax4 12y ago
No form should accept just "HTML" if you don't want just any "HTML" in your form. I was actively trying to talk about his script example and instead I had to second-guess his parser to get past the validator (I even
8.
by mantrax4 12y ago
1. Paste <script>alert("I am a hacker.")</script> in TFA's comment box 2. Select Anonymous from the auth options. 3. Click Submit. 4. Laugh your heart out.
9.
by mantrax4 12y ago
This is why I just call it encoding and decoding. Proper words, and assume context (encoding for what ... decoding from what ).
10.
by mantrax4 12y ago
I can't post a comment containing <script> in this comment form, because it's "disallowed", instead of just escaping it as plain text. The thick, thick irony of a guy who can't even follow his own advice.
11.
by mantrax4 12y ago
Actually, shouting in the office means you coupled the FraudCheckActor to a PaymentCompleteEvent, and you coupled CancelOrderActor to FraudDetectedEvent. Your lower level actors are still coupled with each other, through quite specific even
12.
by mantrax4 12y ago
This guy seems uneasy with Actors. His example is wrong and then he tries to solve it with a solution that's worse than the problem he thinks he has. Let's untangle that stuff. Actors are about conversations between folks organize
13.
by mantrax4 12y ago
The irony of building a game for iOS which is a clone of a JavaScript game which a clone of an iOS game doesn't escape me.
14.
by mantrax4 12y ago
Well, don't worry, malware writers will generate enough bitcoins to sustain the system. The cost of mining to them is practically zero.
15.
$5,000 Security Breach(blog.joemoreno.com)
29 points by mantrax4 12y ago|22 comments
16.
by mantrax4 12y ago
Internet outrage - one the most promising resources of the 21st century. It's cheap, it's renewable, and the Internet is producing more of it than we can handle. If we could figure out how to power engines with Internet outrage, w
17.
by mantrax4 12y ago
Well I'll give you this example. If Facebook would release 3 Facebook apps, where each has mostly the same features, but slightly different, and on top of that each requires a different user/login, that's definitely fragmenta
18.
by mantrax4 12y ago
Fragmentation is having multiple incompatible versions of the same thing, namely, two apps which both have a Facebook chat. Now there'll be one app with Facebook chat and one Facebook app without chat. No fragmentation.
19.
by mantrax4 12y ago
This is why the description is good. Sure, it tests whether you can write a set of statements a computer can understand. But it also tests whether you can understand the intent behind a set of statements a human would make, without going on
20.
by mantrax4 12y ago
I realize it, right. But I hoped you'd see beyond the direct comparison of lambdas with Objective C's blocks. I'm saying that short code doesn't automatically translate to more readable or better code, Objective C's
21.
by mantrax4 12y ago
So, I don't get what the fuss is about. It port scans users, and does nothing interesting with it. But on the other hand, we're talking about Slashdot. I've forgotten it exists. Maybe that was the purpose of all the hot air.
22.
by mantrax4 12y ago
There's no honest attempt to explain the philosophy behind every language with real-world examples in Python. It's just childish jokes. It's the equivalent of saying "Ze fish in le river" is "Frenchish English&
23.
by mantrax4 12y ago
So what's if it's shorter. You'll run out of screen? You'll wear down your keyboard? If you don't like typing it, have a macro. Otherwise, as Objective C shows, the verbosity of code is not relevant at all. It'
24.
by mantrax4 12y ago
Just like people believed the Universe revolves around Earth, they still have this naive believe that they're the center of intelligence in the Universe. Any other display of intelligence is explained as a combination of simple chemica
25.
by mantrax4 12y ago
Yeah, pleading ignorance was a neat way to word it, I admit. The guy is a sleaze-bag, who chose to attack an open source browser (with an important role for the future of the internet, and the work of thousands) through his business for t
26.
by mantrax4 12y ago
You had to Godwin this, didn't you! But I wouldn't hurry to pile on Hitler before I know if he apologized. What if he had apologized? That really changes things.
27.
by mantrax4 12y ago
I think we can safely stop thinking about the morality and legality of our actions, as long as we just apologize regularly. Here we have two people who have both performed actions which are both indirectly anti-gay. But one is let go due
28.
by mantrax4 12y ago
In short, private virtual addressing is legacy cruft from a time when this was the only way to organize things due to a constrained memory block identifier namespace. Think about it like IPv4 vs. IPv6, i.e. hacks like NAT, vs. "everyth
29.
by mantrax4 12y ago
It's typical for crypto algorithms to generate an endless (or extremely large) "keystream" by permutating a much shorter secret key with other data somehow. The fact they're not using the term "keystream" for t
30.
by mantrax4 12y ago
The quote actually goes back much earlier, to the days where writing a program meant writing machine code routines. And it's also highly misunderstood, because it's used as a mantra, out of context. Good development is not mantra-

More ›